Container based application reification

ABSTRACT

Embodiments disclosed herein provide systems, methods, and machine-readable media for container-based application reification. In an example embodiment, an application reification system preserves a version of application data at a first time and a configuration of an application at the first time. At a second time, the application reification system creates a template for a container containing the application in the configuration and a pointer to the version of the application data in a secondary storage repository.

RELATED APPLICATIONS

This application is a continuation of and claims the benefit of priority of U.S. application Ser. No. 16/892,508, filed Jun. 4, 2020, which is a continuation of and claims the benefit of priority of U.S. application Ser. No. 16/691,979, filed Nov. 22, 2019, which is a continuation of and claims the benefit of priority of U.S. application Ser. No. 16/453,214, filed Jun. 26, 2019, which is a continuation of and claims the benefit of priority of U.S. application Ser. No. 16/392,752, filed Apr. 24, 2019, which is a continuation of and claims the benefit of priority of U.S. application Ser. No. 14/975,084, filed Dec. 18, 2015, which is related to and claims priority to U.S. Provisional Patent Application No. 62/093,788, filed Dec. 18, 2014, each of which is hereby incorporated by reference in its entirety.

TECHNICAL BACKGROUND

Software containers, such as virtual machines and Linux containers (e.g. Docker containers), allow applications to be “sandboxed” on a computer system. This sandboxing allows an application and its data to be separated from other applications. Furthermore, containers allow further separation between an application, a physical computing system, and operating system thereon. Essentially, a container virtualizes the interface between the application and the computing system on which it is executing. Under such an arrangement, the container can regulate any interaction between the application and the computing system or its operating system.

OVERVIEW

Embodiments disclosed herein provide systems, methods, and computer readable media for container based application reification. In a particular embodiment, an application reification system is provided including one or more computer readable storage media and a processing system operatively coupled with the one or more computer readable storage media. The application reification system further includes program instructions stored on the one or more computer readable storage media that, when read and executed by the processing system, direct the processing system to preserve a version of application data at a first time and a configuration of an application at the first time. At a second time subsequent to the first time, the program instructions direct the processing system to create a template for a container containing the application in the configuration and a pointer to the version of the application data in a secondary storage repository.

In some embodiments, the application executes in the container on a host system and operates on the version of the application data.

In some embodiments, the program instructions further direct the processing system to transfer the template to the host system on which the application executes in the container.

In some embodiments, the host system provides an amount of computing resources equal to or scaled from a production environment for the application at the first time.

In some embodiments, to direct the processing system to preserve the version of the application data at a first time, the program instructions direct the processing system to identify items of the application data in a primary storage repository that have changed since a previous version was created and create the version of the application data in the secondary storage repository.

In some embodiments, to direct the processing system to preserve the configuration of the application at the first time, the program instructions direct the processing system to store the configuration in the secondary storage repository with the version of the application data.

In some embodiments, the configuration includes parameters of the application to replicate processing results of the application that would have occurred at the first time.

In some embodiments, the program instructions further direct the processing system to perform data integrity checks on the version of the application data.

In another embodiment, a method of application reification provides preserving a version of application data at a first time and a configuration of an application at the first time. At a second time subsequent to the first time, the method provides creating a template for a container containing the application in the configuration and a pointer to the version of the application data in a secondary storage repository.

In yet another embodiment, a host system is provided including one or more computer readable storage media and a processing system operatively coupled with the one or more computer readable storage media. The host system further includes program instructions stored on the one or more computer readable storage media that, when read and executed by the processing system, direct the processing system to receive an instruction from a user to reify an application in a configuration at a first time and a version of application data for the application preserved at a first time. The program instructions further direct the processing system to request, from an application reification system, a template for a container containing the application in the configuration and a pointer to the version of the application data in a secondary storage repository. Also, the program instructions direct the processing system to receive the template from the application reification system.

BRIEF DESCRIPTION OF THE DRAWINGS

FIG. 1 illustrates a computing environment for container based application reification.

FIG. 2 illustrates an operation of the computing environment for container based application reification.

FIG. 3 illustrates another computing environment for container based application reification.

FIG. 4 illustrates an operational scenario of the other computing environment to preserve an application and data for the application in an example of container based application reification.

FIG. 5 illustrates an operational scenario of the other computing environment for container based application reification.

FIG. 6 illustrates a data processing system for container based application reification.

FIG. 7 illustrates a host system for container based application reification.

DETAILED DESCRIPTION

The following description and associated figures teach the best mode of the invention. For the purpose of teaching inventive principles, some conventional aspects of the best mode may be simplified or omitted. The following claims specify the scope of the invention. Note that some aspects of the best mode may not fall within the scope of the invention as specified by the claims. Thus, those skilled in the art will appreciate variations from the best mode that fall within the scope of the invention. Those skilled in the art will appreciate that the features described below can be combined in various ways to form multiple variations of the invention. As a result, the invention is not limited to the specific examples described below, but only by the claims and their equivalents.

The various embodiments disclosed herein provides for reification of an application using a container. The container may be any type of container, including but not limited to virtual machines, Linux containers, or any other type of software container having similar functionality. Containers allow for an operating system of a physical computing system to have multiple isolated processing spaces. For instance, one application, or other type of computing process, executing within one container is unaware of another application executing with another container even though the two containers are executing on the same computing system.

Also, many types of containers have the added benefit of easily deploying an instance of an application. Specifically, within a container an application can be encapsulated with all of the application's configurations, dependencies, and required resources (e.g. network interfaces, storage, etc.). Therefore, when new instances of an application are needed, a container for the application can be quickly instantiated, copied on the same computing system, copied to another computing system, or moved to another computing system.

The embodiments herein use containers to allow reification of a version of the application from data in the secondary repository (e.g. backup) rather than data currently in a primary production environment. When used in this way, containers negate the need to copy out data from the secondary repository, automate the workflow of using a version of the data in the secondary repository (e.g. running data integrity checks, setting up application with appropriate configurations, etc), and enable creation of multiple sandboxed environment that allows the user to recreate the primary production environment or a scaled down version of it.

FIG. 1 illustrates computing environment 100 in an example scenario of container based application reification. Computing environment 100 includes data processing system 101 and data storage system 141. Data processing system 101 includes application 130, application configuration 131, and data version pointer 132. Data storage system 141 includes data versions 142, 143, and 144. Data processing system 101 and data storage system 141 communicate over communication link 111.

In operation, application 130 comprises an application that operates on application data. Typically application 130 operates on data currently in a primary production environment. The primary production environment may include data stored on data processing system 101 or elsewhere, such as a remote storage system on a local or wide area network. In this example, however, application 130 is executing within container 120. Container 120 directs application 130 to operate on one of data versions 142-144 using data version pointer 132, which points to one of data versions 142-144. The use of data version pointer 132 allows application 130 to operate normally as though it is operating on production data when application 130 is actually operating on a version of application data in a secondary data repository on storage system 141. Thus, while application 130 may request a particular item of production data, data version pointer 132 points to a version of the item in the secondary repository. The version 142-144 pointed to by data version pointer 132 may be indicated by a user, may be marked as a version of the data that existed in the primary production environment during a previous execution of application 103 (as described below), or may be defined by some other means.

In addition to pointer 132, container 120 also maintains a configuration 131 of application 130. Configuration 131 may contain parameters within application 130 itself or may include parameters external to application 130 while still affecting how application 130 executes. For example, many containers virtualize computing elements, such as operating system or hardware (e.g. processor, memory, network interfaces, etc.) modules, on which the application executes. Configuration 131 may include any parameters for these computing elements that have an effect on the operation of application 130 (e.g. the number of network interfaces affect how application 130 operates while the addresses of those interfaces do not). Like pointer 132, configuration 131 may be user indicated, may correspond to a past configuration for executing application 130, or may be defined by some other means.

As noted above, data storage system 141 is a secondary data repository wherein versions 142-144 of data are stored. Data versions 142-144 may correspond to versions of application data as the application data existed at respective points in time. For example, versions 142-144 may each comprise a backup or snapshot of application data a various points in time. That is, data version 142 may comprise the application data at a first time and data versions 143 and 144 comprise the application data at second and third later times, respectively. Moreover, data versions 142-144 may only track the changes between each data version such that unchanged data does not need to be stored in data storage system 141 multiple times. Thus, if a particular data item does not change from version 142 to 144, the data item is only stored once while still being included in each version.

Advantageously, application configuration 131 and data version pointer 132 within container 120 allows a user to recreate a primary production environment from a prior time in which application 130 can execute. In particular, configuration 131 allows application 130 to execute using the same configuration as during the previous time. Likewise, data version pointer 132 points to the application data version of data versions 142-144 that existed during that previous time.

FIG. 2 illustrates operation 200 of computing environment 100 for container based application reification. Operation 200 includes preserving a version of application data at a first time and a configuration of application 130 at the first time (step 201). Preserving the version may comprise creating a backup or snapshot of the current productions data at the first time and storing the data as one of versions 142-144 on data storage system 141. Alternatively, the version may be automatically backed up as part of another operation. Regardless, information indicating the version, which may be pointer 132 itself, and indicating configuration 131 are stored in a storage component of system 101, in storage system 141, or elsewhere for later access. Additionally, in some examples, application 130 itself (e.g. the binaries for application 130, an installer, or otherwise) may be preserved. Preserving application 130 allows for the exact same version of application 130 to be reified in the steps below. Otherwise, it is possible that application 130 may differ due to updates or otherwise.

At a second time subsequent to the first time, operation 200 provides creating a template for container 120 containing application 130 in configuration 131 and a pointer 132 to the version of the application data in a storage repository of data storage system 141 (step 202). The template is created using the information stored during step 201 to indicate configuration 131 and the data version. Step 202 may be triggered at the request of a user when the user decides to reify application 130 as it was at the first point in time. For example, the user may choose to reify application 130 as it was at the point in time corresponding to data version 143. Step 202 therefore creates the template with a pointer 132 that points to data version 143 and has configuration 131 corresponding to the configuration of application 130 at the time data version 143 was created.

In some examples, once created, integrity checks are performed on the data version indicated by pointer 132. These checks ensure that, once application 130 is executed, the data upon which application 130 is operating is not corrupted and will produce valid results.

Operation 200 then provides executing application 130 in the container 120 (step 203). Container 120 causes application 130 to operate on the version of the application data pointed to by pointer 132 (e.g. version 143 from the example above) rather than current production environment data. Furthermore, container 120 uses configuration 131 to execute application 130. Accordingly, container 120 is able to replicate at least a portion of the primary production environment for application 130 as it existed at the first time.

Referring back to FIG. 1, data processing system 101 comprises a computer system and communication interface. Data processing system 101 may also include other components such as a router, server, data storage system, and power supply. Data processing system 101 may reside in a single device or may be distributed across multiple devices. Data processing system 101 could be an application server(s), a personal workstation, or some other network capable computing system—including combinations thereof.

Data storage system 141 comprises a communication interface and one or more non-transitory storage medium, such as a disk drive, flash drive, magnetic tape, data storage circuitry, or some other memory apparatus. Data storage system 141 may also include other components such as processing circuitry, a router, server, data storage system, and power supply. Data storage system 141 may reside in a single device or may be distributed across multiple devices. Data storage system 141 is shown externally to data processing system 101, but system 141 could be integrated within the components of data processing system 101.

Communication link 111 could use various communication protocols, such as Time Division Multiplex (TDM), Internet Protocol (IP), Ethernet, communication signaling, Code Division Multiple Access (CDMA), Evolution Data Only (EVDO), Worldwide Interoperability for Microwave Access (WIMAX), Global System for Mobile Communication (GSM), Long Term Evolution (LTE), Wireless Fidelity (WIFI), High Speed Packet Access (HSPA), or some other communication format—including combinations thereof. Communication link 111 could be a direct link or may include intermediate networks, systems, or devices.

FIG. 3 illustrates computing environment 300 in an example scenario of container based application reification. Computing environment 300 includes application reification system 301, host system 302, communication network 303, primary data repository 341, and secondary data repository 351. Application reification system 301, host system 302, primary data repository 341, and secondary data repository 351 communicate with communication network 303 over communication links 311-314, respectively.

Communication network 303 comprises network elements that provide communications services to connected systems and devices. Communication network 303 may comprise switches, wireless access nodes, Internet routers, network gateways, application servers, computer systems, communication links, or some other type of communication equipment—including combinations thereof. Communication network 303 may be a single network, such as a local area network, a wide area network, or the Internet, or may be a combination of multiple networks.

In operation, primary data repository 341 stores data items 342 in a data storage system, which may be similar to data storage system 141. Data items 342 may comprise a database accessible by host system 302 or other computing systems. Secondary data repository 351 may also comprise a data storage system similar to data storage system 141. Secondary data repository 351 stores data versions 362-364, which are three most recent data versions of potentially many older data versions also stored in secondary data repository 351 though not shown. Secondary data repository 351 also stores application versions 372-374, which are three of potentially many more application versions stored in secondary data repository 351 though not shown. Application versions 372-374 are versions of one or more applications, including configurations of those applications at the time the application versions were captured for storage in secondary data repository 351.

FIG. 4 illustrates operational scenario 400 for computing environment 300 to preserve an application and data for the application in an example of container based application reification. In scenario 400, host system 302 is executing application 401. Application 401 may be executing natively on host system 302 or may be executing in a container on host system 302. Regardless, application 401 is currently able to operate on data items 342, which is time t1 in accordance with step 1. As noted above, data items 342 represent the current state of the data items accessible and in production on primary data repository 341.

At step 2, application reification system 301 preserves application 401 in application 401's current state at time t1. To preserve application 401, application reification system 301 obtains a copy of the software version for application 401 as is executing on host system 302 at time t1. In some examples, application reification system 301 may only need to obtain information identifying the software version for application 401. The actual software in those examples may be stored elsewhere or will be otherwise obtainable based on the identifying information should application 401 be reified, as described below. Additionally, application reification system 301 determines configuration 402 of application 401 at time t1. Configuration 402 may include settings within application 402, information about hardware resources (virtual or physical) allocated to application 401, parameters under which application 401, or any other information that may be necessary to replicate application 401's operation as it was at time t1. For example, a number of interfaces used by application 401 may be necessary for configuration 402 but the actual addresses of the interfaces are not. Furthermore, application reification system 301 provides application data version identifier 403, which indicates the version of data items data items 342 upon which application 401 is operating at time t1.

More specifically, at step 3, which may occur substantially concurrent to step 2, changes 404 to data items 342 since a most recent data version was created of data items 342 are identified by application reification system 301. These changes are stored at step 4 in secondary data repository 351 as data version 421, which is an incremental data version of data items 342 that depends from data version 362. Data version 362 in turn depends from data version 363, and so on. It is therefore data version 421 that application data version identifier 403 identifies above as the data stored in data version 421 and in the data versions from which it depends because data versions 421 represents data items 342 at time t1.

At step 5, which may occur substantially concurrent to step 4, application 401, configuration 402, and application data version identifier 403 are stored as application version 431. While application version 431 is stored in secondary data repository 351 along with data versions 421 and 362-364, application version 431 may be stored elsewhere, such as on application reification system 301 itself.

FIG. 5 illustrates operational scenario 500 for computing environment 300 for container based application reification. In scenario 500, at a time t2 after time t1, host system 302 requests that application version 431 be reified in a container on host system 302 at step 1. Host system 302 may request application version 431 upon receiving an instruction from a user of host system host system 302, from a user of another system in communication with host system 302, or may be triggered by some other event. While host system 302 in this example is the same system that was executing application 401 at time t1, it should be understood that the same system that executed application 401 at time t1 does not have to be the same system to which application 401 is reified. In this case, host system 302 can provide an exact replica of the resources used by application 401 at time t1 although, in other cases, the resources provided by a host system may instead be a scaled version of those used by application 401 at time t1. In other examples, the functionality of host system 302 may be incorporated into application reification system 301.

In response to the request, application reification system 301 retrieves application version 431 from secondary data repository 351 at step 2. While no additional data versions or application versions are shown to have been stored in secondary data repository 351 since the completion of scenario 400 above, any number of additional data versions and application versions could have been stored in secondary data repository 351 before time t2 arrived.

Once application version 431 is retrieved from secondary data repository 351, application reification system 301 creates template 501 at step 3. Template 501 includes information necessary for host system 302 to instantiate a container that will execute application 401. In particular, template 501 includes the software version of application 401 as was executing at time t1. The software version of application 401 may have been stored in application version 431 or may have been retrieved from elsewhere and merely identified within application version 431. Template 501 further includes configuration 402 so that application 401 can be executed in the same configuration as application 401 was executing at time t1. Additionally, template 501 includes data version pointer 502, which points to data version 421 stored in secondary data repository 351, as what identified by application data version identifier 403 in application version 431. Template 501 may further define additional parameters necessary for instantiating a container, such as the type of container, an operating system for the container, parameters for that operating system, or some other type of information relevant to the operation of a container.

Template 501 is then transferred to host system 302 at step 4. Upon receiving template 501, host system 302 instantiates container 521 from template 501. Container 521 may be a new container or may be an existing container that is configured using template 501 to become container 521. In some cases, container 521 comprises the container that was executing application 401 at time t1. In those cases, container 521 may have been continually running since time t1 or may itself have been preserved for reification of application 401 or for some other purpose. Container 521 executes application 401 therein on host system 302 using the configuration 402 provided by template 501. During execution, data version pointer 502 directs application 401 to operate on data version 421 in secondary data repository 351 at step 5. Using data version pointer 502 allows container 521 to redirect requests from application 401 for data items 342, which have likely been changed since time t1, to data items within data version 421 (or within a data version from which data version 421 depends), which represents data items 342 at time t1. In some examples, rather than simply pointing to data version 421, at least some of the data in data version 421 may be restored to container 521 or elsewhere for use by application 401.

Advantageously, storing application version 431 in the manner described above allows for the reification of application 401 at time t2 in the same state application 401 was executing at time t1. This state includes the data items on which application 401 was operating at time t1, which are now stored as data version 421, without having to first restore data version 421 from secondary data repository 351. As such, the data resulting from the execution of application 401 at time t1 on data items 342 will be the same as when application 401 operates in container 521 on data version 421 at time t2. Moreover, operational scenario 500 offers the flexibility of reifying application 401 and its data, data version 421, from time t1 on any system capable of executing container 521.

FIG. 6 illustrates data processing system 600. Data processing system 600 is an example of data processing system 101 and/or application reification system 301, although systems 101 and 301 may use alternative configurations. Data processing system 600 comprises communication interface 601, user interface 602, and processing system 603. Processing system 603 is linked to communication interface 601 and user interface 602. Processing system 603 includes processing circuitry 605 and memory device 606 that stores operating software 607.

Communication interface 601 comprises components that communicate over communication links, such as network cards, ports, RF transceivers, processing circuitry and software, or some other communication devices. Communication interface 601 may be configured to communicate over metallic, wireless, or optical links. Communication interface 601 may be configured to use TDM, IP, Ethernet, optical networking, wireless protocols, communication signaling, or some other communication format—including combinations thereof.

User interface 602 comprises components that interact with a user. User interface 602 may include a keyboard, display screen, mouse, touch pad, or some other user input/output apparatus. User interface 602 may be omitted in some examples.

Processing circuitry 605 comprises microprocessor and other circuitry that retrieves and executes operating software 607 from memory device 606. Memory device 606 comprises a non-transitory storage medium, such as a disk drive, flash drive, data storage circuitry, or some other memory apparatus. Operating software 607 comprises computer programs, firmware, or some other form of machine-readable processing instructions. Operating software 607 includes container parameters module 608 and container management module 609. Operating software 607 may further include an operating system, utilities, drivers, network interfaces, applications, or some other type of software. When executed by circuitry 605, operating software 607 directs processing system 603 to operate Data processing system 600 as described herein.

In particular, container parameters module 608 directs processing system 603 to preserve a version of application data at a first time and a configuration of an application at the first time. At a second time subsequent to the first time, container management module 609 directs processing system 603 to create a template for a container containing the application in the configuration and a pointer to the version of the application data in a storage repository. In some examples, container management module 609 further directs processing system 603 to execute the application in the container, wherein the application operates on the version of the application data.

FIG. 7 illustrates host system 700. Host system 700 is an example of host system 302, although system 302 may use alternative configurations. Host system 700 comprises communication interface 701, user interface 702, and processing system 703. Processing system 703 is linked to communication interface 701 and user interface 702. Processing system 703 includes processing circuitry 705 and memory device 706 that stores operating software 707.

Communication interface 701 comprises components that communicate over communication links, such as network cards, ports, RF transceivers, processing circuitry and software, or some other communication devices. Communication interface 701 may be configured to communicate over metallic, wireless, or optical links. Communication interface 701 may be configured to use TDM, IP, Ethernet, optical networking, wireless protocols, communication signaling, or some other communication format—including combinations thereof.

User interface 702 comprises components that interact with a user. User interface 702 may include a keyboard, display screen, mouse, touch pad, or some other user input/output apparatus. User interface 702 may be omitted in some examples.

Processing circuitry 705 comprises microprocessor and other circuitry that retrieves and executes operating software 707 from memory device 706. Memory device 706 comprises a non-transitory storage medium, such as a disk drive, flash drive, data storage circuitry, or some other memory apparatus. Operating software 707 comprises computer programs, firmware, or some other form of machine-readable processing instructions. Operating software 707 includes user request module 708 and application request module 709. Operating software 707 may further include an operating system, utilities, drivers, network interfaces, applications, or some other type of software. When executed by circuitry 705, operating software 707 directs processing system 703 to operate Host system 700 as described herein.

In particular, user request module 708 directs processing system 703 to, at a second time, receive an instruction from a user to reify an application in a configuration at a first time prior to the second time and a version of application data for the application preserved at the first time. Application request module 709 directs processing system 703 to request, from an application reification system, a template for a container containing the application in the configuration and a pointer to the version of the application data in a secondary storage repository. Application request module 709 directs processing system 703 to receive the template from the application reification system. In some examples, operating software 707 directs processing system 703 to instantiate the container and execute the application in the configuration therein, wherein the application operates on the version of the application data.

The above description and associated figures teach the best mode of the invention. The following claims specify the scope of the invention. Note that some aspects of the best mode may not fall within the scope of the invention as specified by the claims. Those skilled in the art will appreciate that the features described above can be combined in various ways to form multiple variations of the invention. As a result, the invention is not limited to the specific embodiments described above, but only by the following claims and their equivalents. 

1. An application reification system comprising: a processor; and a memory including instructions which, when executed by the processor, cause the processor to perform operations comprising: preserving a version of application data at a first time, the version of application data including a copy of a state of an application at the first time, the application executing natively on a host system separate from the application reification system; preserving an application configuration of the application at the first time, the application configuration including information associated with execution of the application at the first time; at a second time subsequent to the first time, receiving a request to reify the application at the state corresponding to the first time in a container on the host system; and in response to the request: creating a container template, the container template including information associated with instantiating the container executing the application at the state corresponding to the first time, the container template including the application configuration of the application at the first time and a pointer to the version of the application data stored in a secondary storage repository; and providing the container template to the host system for: reifying the application at the state corresponding to the first time in the container, the host system providing an amount of computing resources to reify the application at the state corresponding to the first time in the container, the amount of computing resources equal to or scaled from a production environment for the application at the first time; and instantiating, based on the container template, the container executing the application at the state corresponding to the first time.
 2. The application reification system of claim 1, wherein the operations further comprise: identifying one or more data items that have changed since a previous version of the application data was created; and creating the version of the application data from the one or more data items.
 3. The application reification system of claim 1, wherein the application configuration includes parameters of the application to replicate processing results of the application corresponding to the first time.
 4. The application reification system of claim 1, wherein the operations further comprise: performing data integrity checks on the version of the application data.
 5. A method of application reification, the method comprising: preserving, by an application reification system, a version of application data at a first time, the version of application data including a copy of a state of an application at the first time, the application executing natively on a host system separate from the application reification system; preserving an application configuration of the application at the first time, the application configuration including information associated with execution of the application at the first time; at a second time subsequent to the first time, receiving a request to reify the application at the state corresponding to the first time in a container on the host system; and in response to the request: creating, by the application reification system, a container template, the container template including information associated with instantiating the container executing the application at the state corresponding to the first time, the container template including the application configuration of the application at the first time and a pointer to the version of the application data stored in a secondary storage repository; and providing the container template to the host system for: reifying the application at the state corresponding to the first time in the container, the host system providing an amount of computing resources to reify the application at the state corresponding to the first time in the container, the amount of computing resources equal to or scaled from a production environment for the application at the first time; and instantiating, based on the container template, the container executing the application at the state corresponding to the first time.
 6. The method of claim 5, further comprising: identifying one or more data items that have changed since a previous version of the application data was created; and creating the version of the application data from the one or more data items.
 7. The method of claim 5, wherein the application configuration includes parameters of the application to replicate processing results of the application corresponding to the first time.
 8. The method of claim 5, further comprising: performing data integrity checks on the version of the application data.
 9. A non-transitory machine-readable storage medium containing instructions that, when read by a machine, cause the machine to perform operations comprising: preserving a version of application data at a first time, the version of application data including a copy of a state of an application at the first time, the application executing natively on a host system separate from an application reification system; preserving an application configuration of the application at the first time, the application configuration including information associated with execution of the application at the first time; at a second time subsequent to the first time, receiving a request to reify the application at the state corresponding to the first time in a container on the host system; and in response to the request: creating a container template, the container template including information associated with instantiating the container executing the application at the state corresponding to the first time, the container template including the application configuration of the application at the first time and a pointer to the version of the application data stored in a secondary storage repository; and providing the container template to the host system for: reifying the application at the state corresponding to the first time in the container, the host system providing an amount of computing resources to reify the application at the state corresponding to the first time in the container, the amount of computing resources equal to or scaled from a production environment for the application at the first time; and instantiating, based on the container template, the container executing the application at the state corresponding to the first time.
 10. The non-transitory machine-readable storage medium of claim 9, wherein the operations further comprise: identifying one or more data items that have changed since a previous version of the application data was created; and creating the version of the application data from the one or more data items.
 11. The non-transitory machine-readable storage medium of claim 9, wherein the application configuration includes parameters of the application to replicate processing results of the application corresponding to the first time.
 12. The non-transitory machine-readable storage medium of claim 9, wherein the operations further comprise: performing data integrity checks on the version of the application data. 